Guidde AI

[ToS] Section 5.1 explicitly states: 'Company agrees that it shall not use any Customer Content for the purpose of training any artificial intelligence models or systems.' This is a clear, unambiguous commitment with no opt-out language needed because training is prohibited outright.

“[ToS] 'Company agrees that it shall not use any Customer Content for the purpose of training any artificial intelligence models or systems'”

[ToS] Section 5.4 grants Company a broad license to 'copy, process, create derivative works of, modify, adapt, and otherwise use your Customer Content and Output' during the term for service provision. While limited to service delivery purposes, the license is sublicensable to subprocessors and third-party service providers, and survives only during the term (not perpetual), creating moderate concern about scope and sublicensing breadth.

“[ToS] 'Customer hereby grants to Company and its Affiliates a worldwide, non-exclusive, royalty-free, paid-up, sublicensable...right and license to copy, process, create derivative works of, modify, adapt, and otherwise use your Customer Content and Output...during the Term of this Agreement'”

[ToS] Section 5.1 permits sharing with 'affiliates, subprocessors, and/or subcontractors' under confidentiality obligations. [Subprocessors] lists 8 third parties including OpenAI, HeyGen, ElevenLabs, and Microsoft. While a subprocessor list is published, the Privacy Policy indicates sharing with analytics and marketing partners (Google Analytics, MailChimp, Salesforce, Hubspot, Mixpanel, Segment, FullStory, Algolia, Clearbit, Fivetran) with limited detail on DPA requirements for all sub-processors.

“[ToS] 'Company shall not disclose Customer Content to any third party, except to its affiliates, subprocessors, and/or subcontractors for the purpose of providing the Service to Customer, and subject to confidentiality obligations'”

[Privacy] Section 2.2 states data is retained 'until we delete the record and we proactively delete it or you send a valid deletion request' but allows longer retention for legal/regulatory requirements, complaints, or litigation prospects. [ToS] Section 11.5 states 'Company shall have no further obligation to make Customer Content available after the effective date of termination' but does not explicitly guarantee deletion. Retention periods are vague and subject to broad exceptions.

“[Privacy] 'Your Personal Data will be stored until we delete the record and we proactively delete it or you send a valid deletion request...in some circumstances we may store your Personal Data for longer periods of time'”

[ToS] Section 5.1 explicitly states: 'As between the Parties, Customer is the exclusive owner of all right, title and interest (including without limitation all Intellectual Property Rights) in and to the Customer Content and Output.' This is a clear, unambiguous statement that the customer retains all IP ownership of both inputs and outputs.

“[ToS] 'As between the Parties, Customer is the exclusive owner of all right, title and interest (including without limitation all Intellectual Property Rights) in and to the Customer Content and Output'”

[Security] explicitly states 'We're SOC 2 Type 2 compliant' and references SOC 2 Type II report attesting to security controls. [Privacy] Section 4.4 confirms 'Guidde Inc complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)' with certification to the U.S. Department of Commerce. [Security] also confirms encryption (AES-256 at rest, 256-bit in transit), annual penetration testing, and 99.9% uptime.

“[Security] 'We're SOC 2 Type 2 compliant' and [Privacy] 'Guidde Inc complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF)'”